Page Expire Popup/Redirection for WordPress Security & Risk Analysis

The 'page-expire-popup' plugin v1.1 exhibits a mixed security posture. While it avoids dangerous functions, file operations, and external HTTP requests, and includes some nonces, several concerning indicators are present. The presence of 3 AJAX handlers, with one lacking authentication checks, significantly expands the attack surface. This unprotected entry point, coupled with 50% of SQL queries not using prepared statements and only 45% of output being properly escaped, suggests a heightened risk of vulnerabilities. The taint analysis revealing a flow with unsanitized paths further exacerbates these concerns.

The vulnerability history indicates a past medium-severity SQL injection vulnerability. The fact that there are no currently unpatched vulnerabilities is a positive sign, but the pattern of past SQL injection issues, combined with the current code analysis findings (raw SQL, unsanitized paths), suggests a recurring weakness in input sanitization and SQL query handling. While the plugin has strengths in avoiding certain risky practices, the identified unprotected AJAX handler and code-level issues necessitate careful consideration of its security.